Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          LERYJ8lwG30P4TZaC9026Y1FlwCxCjZgkokm5zH0LOw=
Subject key identifier:   A6:05:B4:35:4B:72:19:DC:3D:05:E7:70:D3:B4:0B:56:EF:68:A2:CD
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019769CE86ADAC51439B2DEB405830C96661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          158A
Signing time:             Fri 13 Jun 2025 15:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:31 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: ROPcaxBzvSvKT+wKgL57nm/+fk6TBy6T3FJB2FjSXB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:86:ad:ac:51:43:9b:2d:eb:40:58:30:c9:66:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Jun 13 15:00:31 2025 GMT
            Not After : Jun 14 15:00:31 2025 GMT
        Subject: CN=a605b4354b7219dc3d05e770d3b40b56ef68a2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:18:a9:d5:dd:92:f2:d2:5f:86:6f:a4:40:
                    cd:07:27:ad:64:c9:3f:cb:67:af:f3:46:1c:91:0f:
                    2f:d6:4e:58:d8:e5:50:f2:08:40:0a:12:52:e1:2b:
                    9d:99:34:a4:c7:26:24:4d:4e:d1:0a:83:77:96:4c:
                    a5:7b:27:b3:e4:dd:b0:05:35:f0:3f:48:32:59:8d:
                    f5:e8:31:9f:3a:4f:73:90:9e:75:fe:40:ae:06:e6:
                    c2:2a:6c:44:2a:f3:25:bb:02:80:84:f2:18:eb:cb:
                    63:e2:12:6e:18:97:b5:43:03:8c:93:8e:29:6d:8c:
                    2b:4a:37:60:95:50:86:96:8c:8b:c5:94:8f:dc:36:
                    cd:37:13:47:57:4d:a5:b5:68:35:54:db:9d:59:a1:
                    61:11:d9:37:ac:b0:af:c4:8f:4a:44:bc:2f:cc:43:
                    3e:ab:98:2b:21:60:e0:36:51:32:3a:c0:bc:da:d2:
                    55:06:7b:0b:b4:ca:40:3e:9e:3f:70:a7:ca:45:48:
                    84:e6:f7:84:24:a5:2d:25:79:2a:17:e3:f1:70:6f:
                    e1:39:21:ce:89:ce:97:a9:48:61:e9:5d:fe:36:7a:
                    59:9d:0d:8b:cd:9e:a7:b3:8c:e7:4a:f1:fa:7b:f3:
                    6f:03:21:13:7d:69:11:4e:8e:71:0c:0b:cf:e3:d9:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:B4:35:4B:72:19:DC:3D:05:E7:70:D3:B4:0B:56:EF:68:A2:CD
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:06:69:15:0f:4f:29:b2:a7:1f:6a:95:56:dd:c8:e6:04:09:
         c5:4d:35:e2:c3:50:f5:c3:7b:72:07:95:d0:bb:7b:09:0d:04:
         1b:39:c6:97:b6:7a:9a:5d:a3:3c:f7:81:1c:52:b9:da:fe:85:
         96:22:06:a2:08:6a:2d:7c:2d:71:65:4b:6a:a5:e4:a6:de:85:
         18:b2:9e:5d:65:64:9c:e5:02:40:88:63:5e:eb:c5:10:96:18:
         84:a8:75:2f:77:c2:ea:8f:f8:85:84:7f:e2:83:fd:82:a7:d2:
         b0:02:51:fc:ea:b1:33:8d:e4:0e:bc:01:44:e1:7d:63:8d:07:
         86:e5:63:86:fd:cb:b1:7d:23:e5:b5:09:ed:36:b1:0a:38:eb:
         d5:48:03:18:ec:79:1c:b9:bb:4e:6d:c5:04:9f:1a:60:9e:17:
         25:f4:0b:7a:51:1a:72:f1:46:02:43:e2:41:8c:45:2b:ae:29:
         7b:bb:0d:77:3a:b9:ee:61:e5:d5:e9:11:6a:48:cd:91:2c:48:
         db:5e:31:49:a4:e2:17:c1:1d:b6:01:0f:55:c5:99:40:33:9a:
         ad:d4:91:e9:ee:74:36:12:4d:ed:de:9c:43:b7:3d:e9:d3:4a:
         d6:54:f8:e6:7a:ce:03:6e:42:73:20:dd:8c:11:1e:4f:51:a2:
         2d:2d:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:49 2025 by rpki-client